Links

 

Compilation of security standards and recommendations:

  • IETF - Internet Engineering Task Force
    • RFC 3280, RFC 5280: Internet X.509 Public Key Infrastructure. Certificate and Certificate Revocation List (CRL)
    • RFC 3739: Internet X.509 Public Key Infrastructure. Qualified Certificates Profile
    • RFC 3281: An Internet Attribute Certificate Profile for Authorization
    • RFC 3820: Internet X.509 Public Key Infrastructure. Proxy Certificate
    • RFC 2560: Internet X.509 Public Key Infrastructure. Online Certificate Status Protocol (OCSP)
    • RFC 3161: Internet X.509 Public Key Infrastructure. Time-Stamp Protocol (TSP)
    • RFC 2630: Cryptographic Message Syntax (CMS)
    • RFC 3647: Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework
    • RFC 4210: Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)
  • PKCS Public Key Cryptography Standards
    • PKCS #1 RSA Cryptography Standard
    • PKCS #5 Password-Based Cryptography Standard
    • PKCS #6 Extended-Certificate Syntax Standard
    • PKCS #7 Cryptographic Message Syntax Standard
    • PKCS #8 Private-Key Information Syntax Standard
    • PKCS #9 Selected Attribute Types
    • PKCS #10 Certification Request Syntax Standard
    • PKCS #11 Cryptographic Token Interface Standard
    • PKCS #12 Personal Information Exchange Syntax Standard
    • PKCS #15 Cryptographic Token Information Format Standard
  • ITU-T and ISO/IEC
    • ITU-T Recommendation X.509 | ISO/IEC 9594-8: “Information Technology – Open Systems Interconnection – The Directory: Public-Key and Attribute Certificate Frameworks“
  • ETSI European Telecommunications Standards Institute
    • ETSI TS 101 862: Qualified Certificate Profile
    • ETSI TS 102 280: X.509 V.3 Certificate Profile for Certificates Issued to Natural Persons
    • ETSI TS 101 456: Policy requirements for certification authorities issuing qualified certificates
    • ETSI TS 101 733: CMS Advanced Electronic Signatures (CAdES)
    • ETSI TS 101 861: Time stamping profile
    • ETSI TS 101 903: XML Advanced Electronic Signatures (XAdES)
    • ETSI TS 102 778-1: PDF Advanced Electronic Signature Profiles;Part 1: PAdES Overview - a framework document for PAdES
    • ETSI TS 102 778-2: PDF Advanced Electronic Signature Profiles;Part 2: PAdES Basic - Profile based on ISO 32000-1
    • ETSI TS 102 778-3: PDF Advanced Electronic Signature Profiles;Part 3: PAdES Enhanced - PAdES-BES and PAdES-EPES Profiles
    • ETSI TS 102 778-4: PDF Advanced Electronic Signature Profiles;Part 4: PAdES Long Term - PAdES LTV Profile
    • ETSI TS 102 778-5: PDF Advanced Electronic Signature Profiles;Part 5: PAdES for XML Content - Profiles for XAdES signatures
  • W3C World Wide Web Consortium
    • XML Signature WG (XML-DSig)
    • XML Encryption WG (XML-Enc)
    • XML Key Management Working Group (XKMS)
  • OASIS Organization for the Advancement of Structured Information Standards
    • OASIS Web Services Security (WS-Security)
    • OASIS Digital Signature Services (DSS)
    • OASIS Security Assertion Markup Language (SAML)
    • OASIS eXtensible Access Control Markup Language (XACML)
    • OASIS WS-Trust
    • OASIS WS-SecurityPolicy
    • OASIS WS-SecureConversation
    • OASIS Web Services Federation Language (WS-Federation)
  Print E-mail Twit